If this is your first visit, be sure to
check out the FAQ by clicking the
link above. You may have to register
before you can post: click the register link above to proceed. To start viewing messages,
select the forum that you want to visit from the selection below.

Ntfs & Ads

A buddy of mine recently downloaded a movie (Scarface) off of Kazaa.
I introduced him yesterday to TDS-3 Trojan Scanner.
Today he was scanning his harddrive and TDS-3 recogized the movie as having a NTFS ADS hidden data stream.
I didn't have a clue what it was, other than it didn't sound good.
I went and researched a little and found the TDS-3 homepage to be more than helpful.
Read this site it's quite interesting.
So check it out you NTFS and Kazaa people.

Mankind have a great aversion to intellectual labor; but even supposing knowledge to be easily attainable, more people would be content to be ignorant than would take even a little trouble to acquire it.
- Samuel Johnson

Q. Can streams be transferred via email or FTP or other file-transfer protocols?
A. No. Stream contents can be transferred via email, FTP etc., but only in the form of a normal file. If you attempt to email a file with any streams attached, only the actual file will be sent - not any of the streams. Virtually all Internet protocols that support file transfer are non-supportive of streams and other embedded file resources as streams are relatively exclusive to Macintosh and Windows NT/2K systems using the NTFS file system.

This makes it sound like the stream should not have been sent via Kazaa. Well, obviously Kazaa is supportive of streams, but why? What benefit does it give? It seems like that would be extra codeing that wasn't necessary. Unless Kazaa makes your connection a temporary Windows LAN when it exchanges a program. So if you are on their network when you exchange information, could this be used as a way past NAT?